Skip to contentWpwax Post Grid, Slider & Carousel Ultimate vulnerabilities
- unknown post grid, slider & carousel ultimatePost Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title FieldCVE-2026-162606.8 Medium
- wpwax post grid, slider & carousel ultimate, post grid\, slider \& carousel ultimate +1 moreWordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerabilityCVE-2025-247826.5 Medium
- pickplugins post grid, wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File InclusionCVE-2024-134087.5 High
- wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget, post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()CVE-2024-134097.5 High
- wpwax post grid, slider & carousel ultimate, post grid\, slider \& carousel ultimate +1 moreWordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299256.5 Medium
- wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget, post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markupCVE-2024-20068.8 High
- unknown post grid, slider & carousel ultimate, wpwax post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSSCVE-2022-12664.8 Medium